Workspace
Workspace is the product-facing boundary for ownership, billing, custom domains, and console administration.
Internally Lamba still uses tenant as the storage alias. Public docs and UI should use Workspace.
Projects
Projects define runtime access for your product. A project can expose different auth methods, role catalogs, and custom-domain bindings per environment.
Why this model works
Workspaceowns customer-facing auth and API domains.Projectowns runtime membership, roles, and permissions.Team MemberandProject Memberstay separate so console access never silently becomes runtime access.